I have a problem, one NIS isn't stopping. Whenever I do a search in Google, using Firefox, whichever link I click on first redirects me through all sorts of spammy junk sites. I can go back, by spamming the back button in the browser, or backspace, and eventually conquer the redirects, returning to my results page, but by then, that link's totally ruined. If I Ctrl F5 the page, and then feint by right-clicking another result link, then I can go up and click the one I really wanted. I ran Norton, tried MalwareBytes and Kaspersky, none stopped this.
I reinstalled Norton (Kaspersky insists it be uninstalled), and it didn't get it. MalwareBytes caught a 'Trojan.tracur.s', but that wasn't this problem, or if it was, it didn't completely get it.
Having reinstalled Norton, I ran it, nothing. I'm getting far less slowdown, so the tracur may really be gone, but that leaves this other issue.
So I came to the forum here, and I followed the instructions in that link to the right, 'How to troubleshoot a suspected Malware infection'. In the registry, I think I found something.
In that very first listing,
HKEY_CURRENT_USER\Software\Microsoft\Windows\currentversion\Run
I found a line naming something that I didn't think sounded right at all.
calling itself LtMouseUsb54, the data was:
rundll32.exe "C:Users\[my name redacted]\AppData\Roaming\LtMouseUsb54\LtMouseUsb54.dll;ZipLite90 cfccType
I went to the folder containing it, it was created about 5PM 2 Jul 2013. I know I didn't download anything at that time, not intentionally, at least.
I found nothing on Google for LtMouseUsb54, LtMouseUsb, or ZipLite90.
When I tried to submit to threatExpert, per that same link, the LtMousUsb54.dll, it told me the file size was zero, and the file disappeared from its folder. When I went back to the registry key to check the information, while writing this post, it was gone too.
(I first checked all the other keys, and nothing stood out, anything that I didn't know about quick Googling assured me was a legit program.)
Before I delete those programs and that Hkey entry, should it return, I wanted to confirm that I wasn't about to do something colossally stupid.
Thank you for your thoughts and guidance. I'm not trained in computer work or programming, but I'm smart enough to follow the steps given and then ask for help.